Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
File:                     6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (raw, json)
Hash identifier:          o/XwhsB+XVooPsmWzQGDETGh7dBjz+5eR8mUlPI8cLs=
Subject key identifier:   F3:4B:84:17:1B:0F:E7:8E:7F:71:C8:EA:43:F9:A4:5A:B6:1A:CA:29
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       0728
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 22:43:51 +0000
ROA not before:           Fri 02 Oct 2026 22:43:51 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     135386
IP address blocks:        103.155.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 22:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1832 (0x728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Oct  2 22:43:51 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac033a7-a71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:a4:4e:74:3b:64:8b:09:e7:1d:6b:0f:15:
                    c4:94:a2:40:3e:1f:69:b5:4e:99:5b:21:3b:c8:13:
                    31:fb:35:b1:f8:f6:54:ba:32:77:cf:88:71:b4:8b:
                    6f:21:e6:7a:cb:ae:4c:9c:bc:18:1b:a8:c0:48:22:
                    3c:bc:a5:34:c2:bf:2a:9a:00:ea:a4:2c:0a:9a:84:
                    8c:f6:e4:45:c0:2d:f9:65:bb:ba:ba:35:79:f8:1d:
                    65:01:a5:10:41:75:f5:69:f8:6f:1a:43:ab:bd:03:
                    97:14:b0:f3:a0:7d:e2:f0:b8:a5:23:c8:07:60:87:
                    6e:34:7f:62:75:ae:4c:f4:21:e7:8e:9e:25:54:25:
                    bc:d7:c6:3f:d2:79:d8:d8:df:eb:96:ad:21:19:d4:
                    6a:24:a8:db:48:25:4b:d3:c6:9c:40:7b:95:0b:95:
                    f3:d8:32:1a:d9:d9:33:b3:89:65:ea:5f:b3:e6:7f:
                    6c:3f:a9:db:18:22:4a:cc:82:2f:b2:12:32:8f:eb:
                    5a:c2:ae:cf:ef:29:1d:40:ae:21:11:fa:56:c7:e7:
                    4d:9d:5b:2f:18:23:0c:8b:7c:64:89:9e:1a:ee:ab:
                    a6:7f:9e:cb:b6:f5:fa:c9:3d:e8:b9:75:43:a3:0c:
                    08:ad:66:66:a2:2c:2f:30:9f:53:88:34:be:ad:55:
                    eb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4B:84:17:1B:0F:E7:8E:7F:71:C8:EA:43:F9:A4:5A:B6:1A:CA:29
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:b9:be:5d:58:5c:ae:ce:94:ae:6f:a2:09:c4:54:11:bc:30:
         46:58:b3:4c:12:b3:28:80:8d:27:fe:ec:cb:72:2a:fe:e2:63:
         c9:85:71:24:62:32:04:8c:a6:64:a0:d9:9d:0f:38:bc:b4:6b:
         fe:e5:f7:e1:a6:6e:69:bb:ea:87:ca:33:8c:52:e4:c2:fd:ba:
         35:3f:44:22:ab:e8:db:0b:f0:55:b9:d5:f0:a2:0b:db:fc:fa:
         54:b0:59:6e:23:f1:b4:54:49:3a:38:a8:10:21:e5:d9:16:53:
         56:09:a5:f3:26:c9:e6:b5:2c:d1:0b:78:83:3c:eb:ea:53:e1:
         ae:a0:43:db:b6:43:36:21:8d:f5:01:06:85:4b:66:53:f9:c2:
         e7:dc:5b:42:d5:f5:72:06:5f:6f:08:03:c1:f2:bc:c2:49:03:
         69:5d:34:2d:98:82:85:43:c6:6b:0c:24:28:e6:63:20:22:9a:
         83:fd:9d:fa:4a:12:75:41:16:b6:de:d9:97:0c:18:76:d5:12:
         f4:67:95:4d:6c:9a:85:cb:da:6c:ea:6d:19:be:93:9b:8f:4a:
         d2:8b:4c:54:3e:5f:64:c9:a2:5f:c6:09:c1:f7:7d:7b:7b:d6:
         39:ea:9b:62:ea:8e:71:e4:67:d6:10:e9:55:ad:8b:34:25:b9:
         f1:9a:fc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:25:28 2026 by rpki-client